Paychex
Jan 2024 — Present
Owned end-to-end SOC and cloud security monitoring across Splunk, Microsoft Sentinel, and Akamai WAF. Designed AWS-native security controls integrating Security Hub, GuardDuty, CloudTrail, and IAM into Splunk. Tuned Microsoft Defender for Cloud and Azure Sentinel analytics rules. Engineered Akamai Kona WAF policies. Built 15+ Cortex XSOAR automated playbooks. Led MITRE ATT&CK-mapped threat hunting and forensic IR, producing audit-ready documentation aligned to PCI-DSS, HIPAA, FedRAMP, and SOC 2.
Facto Secure
Jul 2021 — Jul 2023
Monitored and triaged 5,000+ daily events across Splunk and IBM QRadar. Engineered 50+ SIEM correlation rules for phishing, ransomware, and RAT campaigns. Implemented AWS CloudTrail, GuardDuty, and Security Hub into QRadar. Led vulnerability management lifecycle using Nessus and Qualys VMDR across 100+ assets, integrating SAST/SCA tooling into CI/CD pipelines.
MA · Information Technology Management
BE · Computer Science and Engineering